This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/J1Sd-NZM-sjm3Ga5_YhVMtDs0Iw.roa File: J1Sd-NZM-sjm3Ga5_YhVMtDs0Iw.roa (raw, json) Hash identifier: 5skkO0VA2fXKD8mx8GGrzwshnvuHDY9J9MdJAaUhV/8= Subject key identifier: 27:54:9D:F8:D6:4C:FA:C8:E6:DC:66:B9:FD:88:55:32:D0:EC:D0:8C Certificate issuer: /CN=468644b92f394caf3667bdb6af3e38699c54f315 Certificate serial: 019B7910B182C68B735F4D77D71DE343C1F6 Authority key identifier: 46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/J1Sd-NZM-sjm3Ga5_YhVMtDs0Iw.roa Signing time: Thu 01 Jan 2026 10:18:15 +0000 ROA not before: Thu 01 Jan 2026 10:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216383 IP address blocks: 146.19.70.0/24 maxlen: 24 2a13:c4c0::/29 maxlen: 29 2a13:c4c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b1:82:c6:8b:73:5f:4d:77:d7:1d:e3:43:c1:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468644b92f394caf3667bdb6af3e38699c54f315 Validity Not Before: Jan 1 10:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27549df8d64cfac8e6dc66b9fd885532d0ecd08c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:89:0d:20:0c:b9:42:c4:22:a1:19:7a:1b:4a: 6d:cd:c6:d5:9b:60:78:7f:68:69:bc:c9:a6:ed:11: 68:03:0f:6e:81:f2:f6:ad:13:8e:91:a7:1e:50:48: 13:ee:d6:2e:ef:4b:31:fd:fc:f2:ea:74:be:28:9a: 04:f8:af:22:25:8e:fa:eb:7f:01:16:86:0c:9f:59: 17:38:1c:1e:da:6c:67:46:4e:97:6a:41:d6:a9:1f: 3c:82:44:7f:8e:fd:6a:b4:37:e5:8e:83:e4:ef:61: 5d:c0:ae:b3:8a:49:87:c8:0f:4e:93:6a:2d:38:83: 48:ed:3d:8d:c7:b1:db:65:6d:87:f6:cb:cf:cb:ec: 0d:f4:54:66:ef:6b:22:1f:c1:5a:87:ee:47:7f:6f: 1e:01:bc:4d:aa:0c:f9:5f:f5:52:4e:e3:db:80:d3: 9b:a1:94:bd:38:83:4d:e4:49:a2:61:12:fc:d4:93: ab:f5:8e:7a:72:e7:8f:42:59:29:83:1b:db:73:59: 47:3f:86:8f:80:e8:cf:3e:4d:03:d2:9c:24:af:34: d1:56:4b:63:93:aa:a8:0e:2c:4c:e1:17:0e:a1:2b: 11:97:e9:d4:1c:2e:95:75:03:74:83:5f:62:f6:6d: 6d:e5:96:67:20:10:41:77:4f:3e:4a:38:fc:5c:6f: bb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:54:9D:F8:D6:4C:FA:C8:E6:DC:66:B9:FD:88:55:32:D0:EC:D0:8C X509v3 Authority Key Identifier: keyid:46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/J1Sd-NZM-sjm3Ga5_YhVMtDs0Iw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.70.0/24 IPv6: 2a13:c4c0::/29 Signature Algorithm: sha256WithRSAEncryption 31:b5:08:a2:68:f1:f0:e3:0b:7e:8d:7d:8f:ed:e4:d6:c7:c3: 89:73:1c:59:ce:d7:dc:70:8a:e2:31:b9:28:0f:18:dc:a3:d6: fd:bc:c8:8d:8e:ae:71:be:53:55:9a:da:77:2e:32:6a:20:b9: a3:86:a2:e0:6d:cc:be:1a:a1:61:ca:41:0d:e9:49:99:4d:84: 93:de:3b:cd:ef:22:51:5f:8b:e0:01:d8:52:3c:e3:25:3e:db: 3b:81:3c:1c:fe:2c:a7:c0:bd:eb:29:9a:06:12:63:60:3e:f5: 21:ff:3d:77:f9:a8:94:9b:42:26:b2:f1:1d:15:d2:59:b7:f3: b1:58:c0:12:b9:de:a9:29:22:29:79:1e:df:25:21:49:48:22: 30:0d:6b:91:73:3c:dd:ec:ac:30:b9:90:11:46:c0:ad:df:74: 20:3f:5d:00:11:21:84:58:a8:8f:39:c4:75:d1:af:66:c7:91: c2:d5:4b:79:b4:a9:fd:05:ec:e2:f3:78:d2:ec:51:25:f3:03: af:f6:5d:ae:9d:db:93:03:8c:c6:5f:04:39:24:60:f5:4f:01: c8:29:67:04:56:e1:9a:94:40:cf:db:3b:ee:c6:a7:d2:74:76: 45:e6:4c:fa:a3:02:d9:85:dc:8a:ff:7b:4b:97:ef:77:5f:c7: 21:42:8d:9d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5ELGCxotzX0131x3jQ8H2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ODY0NGI5MmYzOTRjYWYzNjY3YmRiNmFmM2UzODY5OWM1 NGYzMTUwHhcNMjYwMTAxMTAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzU0OWRmOGQ2NGNmYWM4ZTZkYzY2YjlmZDg4NTUzMmQwZWNkMDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24kNIAy5QsQioRl6G0ptzcbVm2B4 f2hpvMmm7RFoAw9ugfL2rROOkaceUEgT7tYu70sx/fzy6nS+KJoE+K8iJY76638B FoYMn1kXOBwe2mxnRk6XakHWqR88gkR/jv1qtDfljoPk72FdwK6zikmHyA9Ok2ot OINI7T2Nx7HbZW2H9svPy+wN9FRm72siH8Fah+5Hf28eAbxNqgz5X/VSTuPbgNOb oZS9OINN5EmiYRL81JOr9Y56cuePQlkpgxvbc1lHP4aPgOjPPk0D0pwkrzTRVktj k6qoDixM4RcOoSsRl+nUHC6VdQN0g19i9m1t5ZZnIBBBd08+Sjj8XG+76QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCdUnfjWTPrI5txmuf2IVTLQ7NCMMB8GA1UdIwQY MBaAFEaGRLkvOUyvNme9tq8+OGmcVPMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm9aRXVTODVUSzgyWjcyMnJ6NDRhWnhVOHhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wOTE4NDEtMDJmZS00NGRiLWJhMTYt YTVlMTNiNGZiMTJiLzEvSjFTZC1OWk0tc2ptM0dhNV9ZaFZNdERzMEl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8wOTE4NDEtMDJmZS00NGRiLWJhMTYtYTVlMTNiNGZiMTJi LzEvUm9aRXVTODVUSzgyWjcyMnJ6NDRhWnhVOHhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAkhNGMA0E AgACMAcDBQMqE8TAMA0GCSqGSIb3DQEBCwUAA4IBAQAxtQiiaPHw4wt+jX2P7eTW x8OJcxxZztfccIriMbkoDxjco9b9vMiNjq5xvlNVmtp3LjJqILmjhqLgbcy+GqFh ykEN6UmZTYST3jvN7yJRX4vgAdhSPOMlPts7gTwc/iynwL3rKZoGEmNgPvUh/z13 +aiUm0ImsvEdFdJZt/OxWMASud6pKSIpeR7fJSFJSCIwDWuRczzd7KwwuZARRsCt 33QgP10AESGEWKiPOcR10a9mx5HC1Ut5tKn9Bezi83jS7FEl8wOv9l2unduTA4zG XwQ5JGD1TwHIKWcEVuGalEDP2zvuxqfSdHZF5kz6owLZhdyK/3tLl+93X8chQo2d -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:22 2026 by rpki-client